Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/778be72c-f792-3d93-925f-6e82eb6eba9f.roa
File:                     778be72c-f792-3d93-925f-6e82eb6eba9f.roa (raw, json)
Hash identifier:          Kvtaa5ACLHy3L0cyZBWRpXX0+03l7HqmDgn9c8bmY7A=
Subject key identifier:   18:DE:C7:13:7F:26:EB:A1:60:5F:41:F1:27:91:0C:F2:AB:03:AA:6F
Certificate issuer:       /CN=1ff04835-864a-40da-a12f-dcad0faabb8c
Certificate serial:       010D0C9F4328584DF3BBC1CA7A6DD3F6A3403480
Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/778be72c-f792-3d93-925f-6e82eb6eba9f.roa
Signing time:             Mon 25 May 2026 15:21:19 +0000
ROA not before:           Mon 25 May 2026 15:21:19 +0000
ROA not after:            Sun 23 Aug 2026 15:21:19 +0000
asID:                     399955
IP address blocks:        104.152.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:bb:c1:ca:7a:6d:d3:f6:a3:40:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c
        Validity
            Not Before: May 25 15:21:19 2026 GMT
            Not After : Aug 23 15:21:19 2026 GMT
        Subject: CN=f43438cb-843c-4f42-87a7-f61db05f0b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:1a:0a:e2:fc:e2:15:ea:a2:53:0d:be:a8:
                    4c:71:de:47:38:4e:c4:f5:10:b7:30:08:fc:e9:17:
                    74:1a:0f:31:d4:f6:0a:ce:48:a6:83:ef:dc:55:c8:
                    f2:0b:a6:bb:fd:74:8a:b6:24:97:5e:72:a5:2c:ad:
                    fa:9f:f9:bd:ab:09:02:c1:f3:31:dd:2d:de:4a:d5:
                    ec:24:55:b1:38:e2:fd:d1:0a:90:b9:6b:17:80:d6:
                    71:62:4f:28:9c:41:e5:bf:f2:25:ee:6b:40:6a:d5:
                    ba:a1:65:fc:bb:a2:d4:a0:5e:87:21:fc:cd:ac:ac:
                    7b:0c:c8:44:80:2c:75:99:83:54:4f:66:4e:2f:23:
                    c3:95:28:61:c7:4b:cc:e0:62:70:f3:0c:89:a8:6c:
                    d9:2e:2b:e1:82:a1:3a:fc:06:a0:d1:e9:8f:8b:44:
                    e1:7e:c4:76:e6:51:55:30:35:6a:8e:4c:55:fc:6d:
                    76:e4:0e:80:36:8f:99:04:11:68:9d:61:f6:6f:98:
                    9b:30:36:07:07:b3:e5:1d:a0:26:49:96:04:e2:6f:
                    b3:30:18:44:d1:a6:6d:8c:6e:5d:76:4a:a2:09:01:
                    00:0f:1a:8a:cd:9f:4d:2f:31:8a:ec:5f:ab:f3:d7:
                    f7:36:f0:83:0c:74:23:3f:a1:20:fa:63:fb:45:73:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:C7:13:7F:26:EB:A1:60:5F:41:F1:27:91:0C:F2:AB:03:AA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/778be72c-f792-3d93-925f-6e82eb6eba9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl

            X509v3 Authority Key Identifier:
                keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:63:d4:ed:9c:f2:99:29:1f:4f:e5:5d:34:bd:b0:ce:d0:
         55:51:56:b3:07:e9:f4:db:f1:4b:96:b8:53:da:7f:bb:4d:27:
         f1:ef:6b:2a:16:b2:33:ae:1a:a8:7a:1e:9c:db:58:df:6a:ca:
         84:27:a6:9b:ac:e1:7b:2d:02:00:80:c1:e2:6e:57:ad:66:1f:
         b0:d8:f4:8b:ef:ec:b1:48:55:4d:d0:5f:f4:1a:56:45:38:a1:
         35:a3:2e:c0:39:04:f2:a7:d6:39:19:87:80:35:fc:db:ea:9f:
         15:37:3f:c9:a2:5a:ff:4f:e9:8f:4c:dd:18:05:bd:e5:e5:41:
         80:4d:d3:10:7f:88:10:43:bb:98:68:92:2d:67:a1:24:3e:7e:
         fb:f7:fb:21:2e:18:c9:b9:97:92:9a:50:94:f2:76:de:8e:92:
         58:cb:d9:32:a2:14:5f:f2:bf:db:39:1c:14:b9:43:73:c6:25:
         95:7a:63:b0:78:41:a8:24:0c:1e:95:2a:0a:e3:65:cb:14:62:
         a3:c6:f0:c5:58:9d:a8:ad:36:29:0b:24:6a:46:7b:3b:cf:99:
         89:4a:00:eb:6b:46:87:e6:35:0f:14:51:fb:a7:eb:42:49:f4:
         35:1c:64:a9:c9:0c:0d:96:ba:c2:a2:62:bd:11:46:73:5f:24:
         be:b1:7b:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zu8HKem3T9qNANIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi
YjhjMB4XDTI2MDUyNTE1MjExOVoXDTI2MDgyMzE1MjExOVowLzEtMCsGA1UEAxMk
ZjQzNDM4Y2ItODQzYy00ZjQyLTg3YTctZjYxZGIwNWYwYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+AaCuL84hXqolMNvqhMcd5HOE7E9RC3MAj8
6Rd0Gg8x1PYKzkimg+/cVcjyC6a7/XSKtiSXXnKlLK36n/m9qwkCwfMx3S3eStXs
JFWxOOL90QqQuWsXgNZxYk8onEHlv/Il7mtAatW6oWX8u6LUoF6HIfzNrKx7DMhE
gCx1mYNUT2ZOLyPDlShhx0vM4GJw8wyJqGzZLivhgqE6/Aag0emPi0ThfsR25lFV
MDVqjkxV/G125A6ANo+ZBBFonWH2b5ibMDYHB7PlHaAmSZYE4m+zMBhE0aZtjG5d
dkqiCQEADxqKzZ9NLzGK7F+r89f3NvCDDHQjP6Eg+mP7RXN1qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjexxN/JuuhYF9B8SeRDPKrA6pvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw
NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvNzc4YmU3MmMtZjc5Mi0z
ZDkzLTkyNWYtNmU4MmViNmViYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx
MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh
YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk
MGZhYWJiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSRY9TtnPKZKR9P5V00vbDO0FVRVrMH6fTb8UuWuFPaf7tNJ/HvayoW
sjOuGqh6HpzbWN9qyoQnppus4XstAgCAweJuV61mH7DY9Ivv7LFIVU3QX/QaVkU4
oTWjLsA5BPKn1jkZh4A1/NvqnxU3P8miWv9P6Y9M3RgFveXlQYBN0xB/iBBDu5ho
ki1noSQ+fvv3+yEuGMm5l5KaUJTydt6OkljL2TKiFF/yv9s5HBS5Q3PGJZV6Y7B4
QagkDB6VKgrjZcsUYqPG8MVYnaitNikLJGpGezvPmYlKAOtrRofmNQ8UUfun60JJ
9DUcZKnJDA2WusKiYr0RRnNfJL6xewk=
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:15 2026 by rpki-client